Security and Privacy Challenges in the Internet of Things [Security and Privacy Matters]

Lee, Jong‐Hyouk; Kim, Hyoungshick

doi:10.1109/mce.2017.2685019

Cited by 72 publications

(17 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, vulnerabilities in IP cameras had been used to launch the well-known DDoS. Moreover, even if the camera in Figure 1 does not contain any vulnerability, an attacker can also utilize vulnerabilities in the gateway node to redirect the network flow of the camera into an evil Internet node to extract privacy via machine learning [28,29].…”

Section: Typical Iot Networkmentioning

confidence: 99%

Discovering Vulnerabilities in COTS IoT Devices through Blackbox Fuzzing Web Management Interface

Wang

Zhang

Chen

et al. 2019

Security and Communication Networks

View full text Add to dashboard Cite

A novel approach for discovering vulnerability in commercial off-the-shelf (COTS) IoT devices is proposed in this paper, which will revolutionize the area. Unlike previous work, the web management interface in IoT was used to detect vulnerabilities by leveraging fuzzing technology. To validate and evaluate this scheme, a tool named WMIFuzzer was designed and implemented. There were also two challenges: (1) due to the diversity of web interface implementations, there were no existing seed messages for fuzzing this interface and it was inefficient while taking random messages to launch the fuzzing and (2) because of the highly structured seed message, fuzzing with byte-level mutation could conduce to be rejected by the device at an early stage. To address these challenges, a brute-force UI automation was designed to drive the web interface to generate initial seed messages automatically, as well as a weighted message parse tree (WMPT) was proposed to guide the mutation to generate mostly structure-valid messages. The extensive experimental results show that WMIFuzzer could achieve expected result while 10 vulnerabilities including 6 zero-days in 7 COTS IoT devices were discovered.

show abstract

Section: Typical Iot Networkmentioning

confidence: 99%

Discovering Vulnerabilities in COTS IoT Devices through Blackbox Fuzzing Web Management Interface

Wang

Zhang

Chen

et al. 2019

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…Security becomes a key requirement for these mission critical environments. Several security solutions involving cryptography exist for IoT and similar applications [4] [5]. Cryptographic solutions are broadly divided into two types: asymmetric cryptography and symmetric cryptography.…”

Section: Introductionmentioning

confidence: 99%

Proof-of-Authentication for Scalable Blockchain in Resource-Constrained Distributed Systems

Puthal

Mohanty

Nanda

et al. 2019

2019 IEEE International Conference on Consumer Electronics (ICCE)

View full text Add to dashboard Cite

Resource -constrained distributed systems such as the Internet of Things (IoT), edge computing and fog computing are deployed for real-time monitoring and evaluation. Current security solutions are problematic when there is a centralized controlling entity. The blockchain provides decentralized security architectures using proof-of-work (PoW). Proof-of-work is an expensive process for IoT and edge computing due to the deployment of resource-constrained devices. This paper presents a novel consensus algorithm called Proof-of-Authentication (PoAh) to replace Proof-of-Work and introduce authentication in such environments to make the blockchain application-specific. This paper implemented the Proof-of-Authentication system to evaluate its sustainability and applicability for the IoT and edge computing. The evaluation process is conducted in both simulation and real-time testbeds to evaluate performance. Finally, the process of Proof-of-Authentication and its integration with blockchain in resource-constrained distributed systems is discussed. Our proposed PoAh, while running in limited computer resources (e.g. single-board computing devices like the Raspberry Pi) has a latency in the order of 3 secs.

show abstract

“…One who will collect much amount of such an information may dominate and control, as a ruler, the communications on the IoT network. Many computer scientists have pointed out the risk and damage of cyber-attacks as the IoT network grows [3][4][5][6][7][8][9][10]. There are three kinds of security concerns; Firstly, it is that the of 20 ruler can control everyone's information including a personal privacy.…”

Section: Introductionmentioning

confidence: 99%

A Novel Chip-Level Blockchain Security Solution for the Internet of Things Networks

Watanabe

Fan²

2019

Technologies

View full text Add to dashboard Cite

The widespread computer network has been changing drastically and substantially since blockchain and IoT entered the stage. Blockchain is good at protecting data transactions between logical nodes with a desirable guaranty. Internet of Things (IoT), on the other hand, by providing ultimate convenience to consumers, is expected to give rise to many various merits in a broad business scene. The security of IoT is still an open problem and if blockchain can reinforce IoT security, as many authors have hoped in recent papers, these newcomers appear to make a good collaboration to reinforce IoT security. However, software copes with logical nodes and IoT involves a vast number of physical nodes (IoT devices). Enabling blockchain to protect IoT cannot be brought to reality without respectively identifying logical and physical nodes. This is identical to the Proof-of-Trust problem. In this article, we propose a conceptual solution—Blockchained IoT—and show that this concept is able to be realized on-chip level using mass-produced dynamical random access memory (DRAM). We have completed the first test of longevity and temperature dependence (−40 °C to 105 °C) to confirm the necessary characteristics for the 5G base stations that are known to have an issue of self-heating. Furthermore, we have coarsely evaluated the probability of two DRAM IC chips being associated with an identical cyber-physical chip identification accidentally. Then, such a probability is minimal.

show abstract

Security and Privacy Challenges in the Internet of Things [Security and Privacy Matters]

Cited by 72 publications

References 4 publications

Discovering Vulnerabilities in COTS IoT Devices through Blackbox Fuzzing Web Management Interface

Discovering Vulnerabilities in COTS IoT Devices through Blackbox Fuzzing Web Management Interface

Proof-of-Authentication for Scalable Blockchain in Resource-Constrained Distributed Systems

A Novel Chip-Level Blockchain Security Solution for the Internet of Things Networks

Contact Info

Product

Resources

About